< draft-songlee-aes-cmac-96-01.txt   draft-songlee-aes-cmac-96-02.txt >
JunHyuk Song JunHyuk Song
Jicheol Lee Jicheol Lee
INTERNET DRAFT Samsung Electronics INTERNET DRAFT Samsung Electronics
Expires: November 24, 2005 May 25 2005 Expires: November 30, 2005 May 31 2005
The AES-CMAC-96 Algorithm and its use with IPsec The AES-CMAC-96 Algorithm and its use with IPsec
draft-songlee-aes-cmac-96-01.txt draft-songlee-aes-cmac-96-02.txt
Status of This Memo Status of This Memo
By submitting this Internet-Draft, each author represents that any By submitting this Internet-Draft, each author represents that any
applicable patent or other IPR claims of which he or she is aware applicable patent or other IPR claims of which he or she is aware
have been or will be disclosed, and any of which he or she becomes have been or will be disclosed, and any of which he or she becomes
aware will be disclosed, in accordance with Section 6 of BCP 79. aware will be disclosed, in accordance with Section 6 of BCP 79.
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF), its areas, and its working groups. Note that Task Force (IETF), its areas, and its working groups. Note that
skipping to change at page 3, line ? skipping to change at page 4, line 4
CMAC Cipher-based MAC based on an approved symmetric key CMAC Cipher-based MAC based on an approved symmetric key
block cipher, such as the Advanced Encryption block cipher, such as the Advanced Encryption
Standard. Standard.
Key (K) 128-bits (16bytes) long key for AES-128 cipher block. Key (K) 128-bits (16bytes) long key for AES-128 cipher block.
Denoted by K. Denoted by K.
Message (M) Message to be authenticated. Message (M) Message to be authenticated.
Denoted by M. Denoted by M.
The total message M is denoted by sequence of M_i
where M_i is the i'th block with size 128-bit.
Message can be null message which means that the
length of M is 0.
Length (len) The length of message M in bytes. Length (len) The length of message M in bytes.
Denoted by len. Denoted by len.
Minimum value of the length can be 0. The maximum Minimum value of the length can be 0. The maximum
value of the length is not specified in this document. value of the length is not specified in this document.
truncate(T,l) Truncate T (MAC) in msb-first order with l bytes. truncate(T,l) Truncate T (MAC) in msb-first order with l bytes.
T The output of AES-CMAC-128. T The output of AES-CMAC-128.
skipping to change at page 5, line 16 skipping to change at page 5, line 16
+ Algorithm AES-CMAC-96 + + Algorithm AES-CMAC-96 +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ + + +
+ Input : K (128-bit Key described in section 4.1) + + Input : K (128-bit Key described in section 4.1) +
+ : M ( message to be authenticated ) + + : M ( message to be authenticated ) +
+ : len ( length of message in bytes ) + + : len ( length of message in bytes ) +
+ Output : Truncated T (Truncated output with length 12 bytes) + + Output : Truncated T (Truncated output with length 12 bytes) +
+ + + +
+-------------------------------------------------------------------+ +-------------------------------------------------------------------+
+ + + +
+ Step 1. T := AES-CMAC-128 (K,M,len); + + Step 1. T := AES-CMAC (K,M,len); +
+ Step 2. TT := truncate (T, 12); + + Step 2. TT := truncate (T, 12); +
+ return TT; + + return TT; +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Figure 1 Algorithm AES-CMAC-96 Figure 1 Algorithm AES-CMAC-96
5. Test Vectors 5. Test Vectors
These test cases same as defined in [NIST-CMAC] with one exception of These test cases same as defined in [NIST-CMAC] with one exception of
96 bits truncation 96 bits truncation
 End of changes. 4 change blocks. 
7 lines changed or deleted 3 lines changed or added

This html diff was produced by rfcdiff 1.48. The latest version is available from http://tools.ietf.org/tools/rfcdiff/